CVE-2017-7934 - AskarLabs CVE Database

CVE-2017-7934

Vendor N/A

Product OSIsoft PI Server 2017

Weakness CWE-287 · Improper authentication

Published August 25, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an undefined manner.

Key dates

02Disclosure timeline

August 25, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-7934 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2023-43793 Misskey allows users to bypass authentication of Bull dashboard CVE-2020-15164 Authentication Bypass in Scratch Login (mediawiki-scratch-login) CVE-2026-10157 Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication CVE-2021-28495 CVE-2022-40664 Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher